Описание
A missing origin validation in Slate sandbox could be exploited by a malicious user to modify the page's content, which could lead to phishing attacks.
Уязвимые конфигурации
Конфигурация 1Версия до 6.207.0 (исключая)
cpe:2.3:a:palantir:slate:*:*:*:*:*:*:*:*
EPSS
Процентиль: 25%
0.00085
Низкий
4.3 Medium
CVSS3
5.3 Medium
CVSS3
Дефекты
CWE-1173
CWE-346
Связанные уязвимости
CVSS3: 4.3
github
больше 2 лет назад
A missing origin validation in Slate sandbox could be exploited by a malicious user to modify the page's content, which could lead to phishing attacks.
EPSS
Процентиль: 25%
0.00085
Низкий
4.3 Medium
CVSS3
5.3 Medium
CVSS3
Дефекты
CWE-1173
CWE-346